Skip to content
OpenAdvisories

Vendor

managewp

2 known vulnerabilities.

Products

ManageWP Worker 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2026-39463

    WordPress ManageWP Worker plugin <= 4.9.31 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in ManageWP Worker <= 4.9.31 versions.

    managewp ManageWP Worker
  • High 7.2
    CVE-2026-3718

    ManageWP Worker <= 4.9.31 - Unauthenticated Stored Cross-Site Scripting via 'MWP-Key-Name' Header

    The ManageWP Worker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'MWP-Key-Name' HTTP request header in all versions up to, and including, 4.9.31. This is due to insufficient input sanitization and output escaping of attacker-contr…

    managewp ManageWP Worker Web / CMS